Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: pQT2yZHge1QbrYV6C/sZluO1puZGRwsBBuPD8Vz08GA=
Subject key identifier: 07:0E:AA:F1:83:3C:93:DA:2A:28:7C:4E:56:F6:8B:9A:0C:40:13:8D
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 019D386560B10B4E77D8043200F86C163C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: uH5vYL/V9EwHslj5ExiYtmrUDwJaw9Kld4IUL4POea8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:60:b1:0b:4e:77:d8:04:32:00:f8:6c:16:3c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=070eaaf1833c93da2a287c4e56f68b9a0c40138d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:7d:39:f6:76:5d:84:52:98:c9:be:c3:54:
b6:72:94:81:8e:ad:c3:0e:fc:59:00:41:5d:84:bf:
0f:4a:74:ef:a6:e6:03:31:39:bb:ec:fc:61:57:12:
e2:c8:44:64:49:df:29:86:1d:09:ef:c9:eb:3c:0b:
43:e1:52:83:ec:44:f1:3d:6a:87:f2:bd:b2:bb:32:
4e:db:9e:2e:4b:1f:75:6a:db:91:f1:65:a9:d1:90:
48:4c:e6:f2:62:76:3c:86:39:5f:30:39:4b:2c:c8:
21:21:92:1a:45:3d:25:82:b4:0d:82:dc:59:2f:e4:
83:da:5d:b2:75:6b:c9:20:7f:fa:08:20:9a:ab:27:
96:ef:75:4a:73:a5:7f:53:bc:72:3b:48:0d:16:ff:
90:39:29:22:30:78:00:55:8f:b7:f7:04:eb:9a:dc:
d1:6d:15:34:c7:4f:04:39:d5:e2:8e:20:7d:a6:c0:
4d:e5:2e:c2:f0:ce:50:b2:87:02:27:74:57:67:96:
1b:e4:01:94:bf:4f:e8:cc:bf:3d:dc:fb:28:7a:c2:
21:6d:5b:01:ca:a5:a0:b8:03:ce:63:de:5b:76:48:
a3:54:18:70:1e:d9:cf:d8:15:1e:0a:15:fd:23:28:
6c:ce:dd:09:88:7b:fe:0b:c2:37:2e:63:04:eb:34:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0E:AA:F1:83:3C:93:DA:2A:28:7C:4E:56:F6:8B:9A:0C:40:13:8D
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4c:c7:8d:be:f4:42:2d:ff:ed:db:27:6b:a1:08:59:bc:7e:
17:13:f0:8d:be:e8:e2:27:b6:59:23:c2:a1:10:25:10:4b:0d:
27:3e:c2:88:be:d8:df:55:d9:d2:73:eb:19:b7:8c:4a:be:fd:
10:55:fe:57:2a:6d:44:15:92:79:be:36:0a:c4:e7:02:bf:29:
2a:3e:c0:30:16:07:ba:71:15:41:97:04:3d:94:35:8b:13:2a:
04:60:b4:6f:13:98:1c:ba:ab:eb:9b:82:0f:bd:62:fd:75:d9:
2e:3c:71:27:bc:99:35:8c:be:e0:7a:1c:4a:69:a6:a7:a4:b3:
62:e3:dd:f3:84:e0:05:90:17:35:cd:dd:05:e4:47:75:d1:a0:
04:9c:a5:37:c1:ca:ab:b0:dc:f1:b1:17:d8:30:ff:f9:2d:4a:
84:e2:74:4e:2d:6c:5f:21:85:6d:41:7e:27:c1:14:32:88:0b:
34:de:54:3d:b9:b5:21:e8:99:ba:c1:6f:1d:d9:0a:86:dd:a6:
ef:ce:27:44:7b:d4:df:d1:e3:e2:10:44:9d:ed:e5:93:3a:2c:
81:ea:30:2f:b6:df:bd:4c:6c:16:d5:0e:62:ff:03:dc:78:59:
f1:13:cc:76:8b:a8:ac:8f:7a:fd:f1:e2:e0:64:41:6d:4a:a6:
b7:7d:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:27 2026 by rpki-client